senlin/etc/senlin/policy.json

50 lines
1.8 KiB
JSON

{
"context_is_admin": "role:admin",
"admin_or_owner": "is_admin:True or project_id:%(project_id)s",
"deny_everybody": "!",
"build_info:build_info": "",
"profile_types:index": "",
"profile_types:template": "",
"profile_types:schema": "",
"policy_types:index": "",
"policy_types:template": "",
"policy_types:schema": "",
"clusters:index": "rule:admin_or_owner",
"clusters:create": "",
"clusters:delete": "rule:admin_or_owner",
"clusters:get": "rule:admin_or_owner",
"clusters:action": "rule:admin_or_owner",
"clusters:update": "rule:admin_or_owner",
"profiles:index": "rule:admin_or_owner",
"profiles:create": "",
"profiles:get": "rule:admin_or_owner",
"profiles:delete": "rule:admin_or_owner",
"profiles:update": "rule:admin_or_owner",
"nodes:index": "rule:admin_or_owner",
"nodes:create": "",
"nodes:get": "rule:admin_or_owner",
"nodes:action": "rule:admin_or_owner",
"nodes:update": "rule:admin_or_owner",
"nodes:delete": "rule:admin_or_owner",
"policies:index": "rule:admin_or_owner",
"policies:create": "",
"policies:get": "rule:admin_or_owner",
"policies:update": "rule:admin_or_owner",
"policies:delete": "rule:admin_or_owner",
"cluster_policies:index": "rule:admin_or_owner",
"cluster_policies:attach": "rule:admin_or_owner",
"cluster_policies:detach": "rule:admin_or_owner",
"cluster_policies:update": "rule:admin_or_owner",
"cluster_policies:get": "rule:admin_or_owner",
"actions:index": "rule:admin_or_owner",
"actions:get": "rule:admin_or_owner",
"events:index": "rule:admin_or_owner",
"events:get": "rule:admin_or_owner",
"webhooks:create": "",
"webhooks:index": "rule:admin_or_owner",
"webhooks:get": "rule:admin_or_owner",
"webhooks:trigger": "",
"webhooks:delete": "rule:admin_or_owner"
}